CVE-2014-8390

CWE-119 — Buffer Overflow3 documents3 sources
Severity
4.4MEDIUM
EPSS
0.2%
top 62.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Schneider-electric Vampset
Timeline
PublishedApr 3
Latest updateMay 14

Description

Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a (1) CFG or (2) DAT file.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.schneider-electric.com ↗Patch: www.schneider-electric.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-44hm-wr7f-qx65: Multiple buffer overflows in Schneider Electric VAMPSET before 2↗2022-05-14
▶
CVEList
CVE-2014-8390: Multiple buffer overflows in Schneider Electric VAMPSET before 2↗2015-04-03
▶
CVE-2014-8390 (MEDIUM CVSS 4.4) | Multiple buffer overflows in Schnei | cvebase.io